CVE-2012-0647

CVE-2012-0647 describes a vulnerability in Apple Safari versions prior to 5.1.4 where WebKit mishandles HTTP redirects combined with authentication. This flaw could allow a malicious remote web server to capture user credentials by logging the Authorization HTTP header. With a CVSS score of 5.0, it is a medium-severity issue, requiring no authentication and low attack complexity, potentially leading to information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.